Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

definition

Created: 25 Jan 2012 | 6 comments
howimsmart's picture
0 0 Votes
Login to vote

Hi Guys,

We are using Symantec Endpoint protection 11.05.

When we insert the usb drive in to the system,it shows as a threat.

After disconnecting the usb drive, its creating exe files.

Comments

howimsmart's picture
25
Jan
2012
0 Votes 0
Login to vote

RE

Check this article & block the autorun.inf its vey helpful to you.

http://www.symantec.com/business/support/index?pag...

Regards
Vicky

Mithun Sanghavi's picture
25
Jan
2012
0 Votes 0
Login to vote

Suggestions

Hello,

I would suggest you to Run a Full scan on your USB drive.

Secondly, Is the SEP updated with Latest Virus Definitions?

Is the machine installed with all the Microsoft Service Packs and Security Patches?

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3

Follow me on Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo

howimsmart's picture
25
Jan
2012
0 Votes 0
Login to vote

Re

Hi Mithun,

That already we done fullscan after updated the microsoft patches.

Regards
Vicky

cus000's picture
25
Jan
2012
0 Votes 0
Login to vote

What is the filename of that

What is the filename of that .exe ? What risk name appear?

 

Did SEP managed to clean/quarantine/delete it?

 

At which location the file created?

 

Ajit Jha's picture
25
Jan
2012
0 Votes 0
Login to vote

Collect that .exe file and

Collect that .exe file and submit to the security response team and let them analize.

https://submit.symantec.com/websubmit/gold.cgi

Regards'

Ajit Jha

Technical Consultant

STS

Mithun Sanghavi's picture
25
Jan
2012
0 Votes 0
Login to vote

Questions

Hello,

Let me get it right, you say that these .exe files are created after you have Removed the USB drive and till the drive was in the Drive. It was not creating the .exe files correct?

1) Is this USB a External Drive or a USB meant for Internet Purposes?

2) Could you let us know the path where the .exe files are getting created? Could you also attach a screenshot?

3) Symantec is detecting it as which Threat?

Awaiting Reply.

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3

Follow me on Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo